Atlassian Flaw Exploited Within Hours of Disclosure

A critical vulnerability (CVE-2026-21589, CVSS 9.3) in Atlassian Data Center products — including Bitbucket, Confluence, and Jira — was disclosed and observed being exploited within two hours, with honeypot activity reported; the report additionally notes associated cybercrime developments (a ransomware recovery CEO charged with wire fraud and an arrest linked to the ShinyHunters group) and a trend of malware authors adding analysis-evasion instructions.